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CLAIMS 

What is claimed is: 

1 LA method for recovering from startup and runtime failures of a software 

2 system in a computer environment including a client device, comprising the steps of: 

3 (a) providing a persistent memory in the client device including at least first 

4 and second system partitions and at least one package partition, wherein runtime components of 

5 the software system are installed on the first and second system partitions and at least the 

6 software packages of the software system downloaded from remote servers are saved on the at 

^13 7 least one package partition; 

ffl 

f{ 8 (b) designating one of the first and second system partitions as a current 

1!a 9 system partition and the other of the first and second system partitions as a backup system 

,r 10 partition; 

mil (c) using the current system partition by a central processing unit of the client 

H 12 device for controlling the client device; 

13 (d) rebooting the software system of the client device using the backup system 

14 partition in response to one of an startup failure, a runtime failure of the software system of the 

1 5 client device, and a user request; 

16 (e) designating the backup system partition as the new current system 

17 partition; and 

18 (f) creating a new backup system partition fi-om the new current system 

19 partition. 
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1 2. The method of claim 1, wherein all installed software packages of the 

2 software system are saved on the at least one package partition, said method farther comprising 

3 the step of reinstalling the entire software system by installing all of the software packages 

4 residing on the at least one package partition after said step (f). 



1 3. The method of claim 2, fiirther comprising the step of allowing selective 

2 removal of the software packages from the at least one package partition after said step (f). 

1 4. The method of claim 1, fiirther comprising the step of allowing selective 
m 2 removal of the software packages from the at least one package partition after said step (f). 

W \ 5 . The method of claim 1 , fiirther comprising the step of: 

"2 2 (g) allowing selective installation of software packages on the first and second 

% 3 system partitions from the software packages saved on the at least one package partition after 

m 4 said step (f). 

fZI 

|I 1 6. The method of claim 5, wherein said step (g) fiirther comprises using a 

2 package management system to determine dependencies between the software packages saved 

3 on the at least one package partition. 

1 7. The method of claim 6, wherein said step (g) fiirther comprises the steps 

2 of selecting a user selected software package on the package partition for installation in one of 

3 the system partitions, determining whether the user selected software package is compatible with 

4 existing installed software packages, and blocking installation of the user selected software 
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5 package if the user selected software package is not compatible with existing installed software 

6 packages. 

1 8. The method of claim 6, wherein said step (g) fiirther comprises the steps 

2 of selecting a user selected software package on the package partition for installation in one of 

3 the system partitions^ determining whether the user selected software package is compatible with 

4 existing installed software packages, and outputting a waming if the user selected software 

5 package is not compatible with existing installed software packages. 



1 9. The method of claim 6, wherein said step (g) further comprises selecting a 

2 user selected software package from the package partition for installation in one of the system 

3 partitions, identifying other software packages on the package partitions required for the user 

4 selected software package using the package management system, and installing both the 

5 selected software package and the other software packages identified by the package 

6 management system. 

1 10. The method of claim 1, fiirther comprising the step of performing a 

2 software package installation procedure for installing a new software package in the client device 

3 before said step (d), wherein the step of installing a new software package includes the substeps 

4 of: 

5 (i) receiving the new software package at the client device; 

6 (ii) determining whether the new software package contains a critical 

7 component, the critical component being a component that requires a reboot of the client device 

8 to run after installation; 
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9 (iii) performing an upgrade procedure including installing the new software 

10 package in the background system partition if it is determined in said step (ii) that the new 

1 1 software package contains a critical component; 

12 (iv) performing an update procedure including installing the new software 

13 package in the current system partition if it is determined in said step (ii) that the new software 

14 package does not contain a critical component; and 

1 5 (v) saving the new software package in the at least one package partition. 

1 11. The method of claim 1 0, fiirther comprising the step of: 

2 (g) allowing selective installation of software packages on the first and second 

3 system partitions from the software packages saved on the at least one package partition after 

4 said step (f). 

1 12. The method of claim 11, wherein said step (g) fiuther comprises 

2 outputting, by the client device, a list of software packages installed on the system partitions 

3 during the most recently performed software package installation procedure. 

1 13. The method of claim 10, wherein said new software package replaces a 

2 preexisting software package such that said substep (v) further includes removing the preexisting 

3 software package from the at least one package partition after the new software package has been 

4 saved. 

1 14. The method of claim 10, fiirther comprising the step of indicating in a 

2 non-volatile memory of the computer that the installation process has started after said substep 



18 



By Express Mail # EL489597185US 



3 (i) and indicating in the non-volatile memory after said substep (v) that the installation process is 

4 completed. 

1 15. The method of claim 10, wherein said substep (i) comprises receiving the 

2 new software package fi*om a remote server via a communication network. 

1 16. The method of claim 15, wherein said substep (i) comprises receiving the 

2 new software package from the remote server automatically. 

1 17. The method of claim 15, wherein said substep (i) comprises receiving the 

2 new software package in response to a user request. 

1 18. The method of claim 10, wherein said substep (ii) comprises reading a 

2 meta-file sent with the new software package to determine whether the package contains a 

3 critical component. 

1 19. The method of claim 10, wherein said upgrade procedure of said substep 

2 (iii) comprises: 

3 copying the current system partition to the backup system partition; 

4 installing the new software package on the backup system partition; 

5 saving the new software on the at least one package partition; 

6 switching the designations of the current and backup system partitions so that the 

7 current system partition includes the new software package; and 

8 rebooting the client device with the current system partition. 
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1 20. The method of claim 19, further comprising the step of deleting an old 

2 version of the software package from the at least one package partition. 

1 2 1 . The method of claim 19, forther comprising the step of updating a package 

2 management system of the client device used to determine dependencies between the software 

3 packages of the software system. 

1 22. The method of claim 10, wherein said update procedure of said substep 

2 (iv) comprises: 

3 installing the new software package on the current system partition; and 

4 saving the new software package on the at least one package partition. 



1 23. The method of claim 22, further comprising the step of deleting an old 

2 version of the software package from the at least one package partition. 

1 24. The method of claim 22, fiirther comprising the step of updating a package 

2 management system of the client device used to determine dependencies between the software 

3 packages of the software system. 

1 25. The method of claim 10, where said substep (iii) is performed if the new 

2 software package includes one of at least part of an operating system kernel, a device driver, and 

3 at least part of a window system. 
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1 26. The method of claim 1, where the client device is one of a personal 

2 computer, a personal digital assistant, a mobile phone, a cable television set top box, and a 

3 satellite television set top box. 

1 27. A computer system comprising a client device connectable to a server via 

2 a communication netv^ork for receiving software packages, said client device comprising: 

3 a persistent memory connected to said central processing unit, said persistent 

4 memory having two system partitions and at least one package partition, wherein runtune 

5 components of a software system of said client device are installed on said two system partitions, 

6 one of said two system partitions being designated as a current system partition and the other one 

7 of said two system partitions is designated as a backup system partition, and wherein all software 

8 packages installed in the computer system are saved on said at least one package partition; 

9 a central processing unit connected to said persistent memory and using said 

10 current system partition for control; and 

11 means for automatically rebooting said computer system using the backup 

12 partition in response to one of a startup failure, a runtime failure, and a user request to revert to a 

13 previous software version. 

1 28. The computer system of claim 27, wherein said client device further 

2 comprises means for allowing user selected ones of the software packages fi-om the at least one 

3 package partition to be installed on one of the system partitions in response to one of a startup 

4 failure, a runtime failure, and a user request to revert to a previous software version. 
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29. The computer system of claim 27, wherein said client device fiirther 
comprises a package management system including information regarding the dependencies and 
version information for each of the software packages on the at least one package partition. 

30. The computer system of claim 27, wherein said client device comprises 
one of a personal computer, a personal digital assistant, and a mobile phone. 
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